Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
File: kIFN053Tklz_iL801DB_1sYhZes.mft (raw, json)
Hash identifier: BKxx6eI+jlEYGf2s1g/9uzUx2C3n6HilzP10zJ/LG5o=
Subject key identifier: EA:4F:C2:4E:BD:3F:96:E5:DA:8B:07:D5:F1:03:5E:4E:48:1C:94:ED
Authority key identifier: 90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
Certificate issuer: /CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Certificate serial: 019F93FF9BA5337A42797FB2E4422F196E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
Manifest number: 0BFA
Signing time: Fri 24 Jul 2026 12:00:30 +0000
Manifest this update: Fri 24 Jul 2026 12:00:30 +0000
Manifest next update: Sat 25 Jul 2026 12:00:30 +0000
Files and hashes: 1: kIFN053Tklz_iL801DB_1sYhZes.crl (hash: mr8k7/R4aKKQYhu/GnDoMEJlhfvpxdT8totZKMiXQqo=)
2: qUkyzsESbsS2zlpHenJHCZVcW9w.roa (hash: c8dRUptusWX4N4YghoTv+p9PDy6rP3WCRhu7DIFBHMM=)
3: yB7LzogMvuZgV-kSV9Bk7IJ_z_U.roa (hash: DJXVu9TX9c1g1XkC2WWXZifFU9SFE1sev4C5DeMfFM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:9b:a5:33:7a:42:79:7f:b2:e4:42:2f:19:6e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90814dd39dd3925cff88bf34d4307fd6c62165eb
Validity
Not Before: Jul 24 12:00:30 2026 GMT
Not After : Jul 25 12:00:30 2026 GMT
Subject: CN=ea4fc24ebd3f96e5da8b07d5f1035e4e481c94ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d2:f0:ba:19:fd:dd:45:02:7c:ca:d5:b4:67:
c8:44:a6:2c:0f:b3:83:a6:11:94:62:50:d3:69:c5:
2c:a3:be:71:84:bc:65:b7:66:79:b1:c5:07:45:8b:
2a:73:08:ee:52:f4:de:6e:5e:b0:c7:31:27:c8:a7:
45:9d:a4:2d:3c:a6:51:40:3e:c7:43:de:5d:e3:e6:
c5:9e:5d:bb:87:eb:aa:de:8e:4e:71:6e:e1:a0:d0:
33:ec:41:f4:a0:ce:c8:f7:03:f0:a9:aa:3f:d8:4c:
58:24:b1:fe:22:e5:cb:50:c8:76:72:e4:80:25:2f:
ea:74:1f:24:77:5c:14:46:af:27:8a:36:5d:e4:7f:
e9:56:d2:57:58:41:84:11:bc:b0:7d:76:9e:19:70:
51:e7:73:e5:b5:5c:5d:95:0c:98:8b:08:97:e5:35:
49:fb:86:ff:53:d1:93:10:2d:03:b7:a5:b5:c9:ff:
16:52:02:ae:3a:02:38:f9:cb:17:44:8f:1f:e7:90:
02:ae:9f:c1:0b:a1:68:fe:96:52:15:23:c1:f7:34:
f3:3f:09:d5:52:c9:06:d6:58:7d:7c:0c:72:99:ec:
43:6d:49:65:72:cf:9e:d0:58:c5:f7:43:85:bc:4e:
01:f5:19:98:9f:78:7c:81:22:4f:ce:6a:3b:df:37:
47:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:4F:C2:4E:BD:3F:96:E5:DA:8B:07:D5:F1:03:5E:4E:48:1C:94:ED
X509v3 Authority Key Identifier:
keyid:90:81:4D:D3:9D:D3:92:5C:FF:88:BF:34:D4:30:7F:D6:C6:21:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kIFN053Tklz_iL801DB_1sYhZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/0ccab6-d837-4c18-82f9-940ae454cb85/1/kIFN053Tklz_iL801DB_1sYhZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:c6:bb:24:58:2d:95:e4:e4:e4:f4:17:c0:98:88:05:dc:78:
59:c3:f6:30:da:5c:cc:a4:83:83:cf:b7:94:ac:37:ba:d9:8b:
af:4f:61:af:fc:26:56:32:3a:b3:91:05:0e:7d:4a:1f:d8:d2:
1d:47:d9:ac:45:5a:8f:7f:05:43:e6:90:cf:87:9b:f7:ac:3e:
da:39:0a:f0:ef:e9:c8:0a:b8:db:7d:85:e1:7e:59:b5:53:51:
1c:71:3e:60:d1:a9:6f:93:4f:80:b2:c8:59:e7:b6:d8:c5:4b:
e0:79:de:2c:98:82:c9:1e:97:65:5b:5d:66:78:5a:3d:53:d4:
64:a7:0a:a5:5c:b5:f8:d5:47:56:83:f6:0b:2d:00:1c:a5:74:
23:74:3c:17:97:4e:e0:0e:61:b6:19:99:98:f0:98:d1:2f:05:
09:7d:ba:39:34:4b:b3:53:17:dd:de:de:28:06:61:90:71:1b:
45:39:69:90:58:2f:13:08:b1:24:43:95:dc:a2:e3:8f:57:2a:
27:4b:3c:28:75:22:fc:30:b6:84:96:97:82:24:98:08:e3:08:
1d:e7:95:24:24:05:96:b3:16:3b:a8:9e:b6:a5:d0:d6:bd:59:
6e:12:0c:54:a4:18:1d:f7:cb:1d:e2:ca:80:61:03:71:96:6d:
9d:13:4c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:33 2026 by rpki-client